Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f268b344-4080-3cd8-b557-3f361592d6ad.roa
File:                     f268b344-4080-3cd8-b557-3f361592d6ad.roa (raw, json)
Hash identifier:          a70XVabW4mT2kN14Hk4dFJ4YrObsSclRBdOoJFBdw8E=
Subject key identifier:   8C:A8:48:09:70:3F:D5:6F:63:9C:80:C1:08:B4:0A:EF:D9:56:10:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F75BA4D934F5A1E434620
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f268b344-4080-3cd8-b557-3f361592d6ad.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.236.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:75:ba:4d:93:4f:5a:1e:43:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=9a25b188-004a-45bb-b1f6-6e8aa3c9bc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:45:23:de:61:35:7d:53:52:ac:a4:a8:65:03:
                    26:96:b9:49:0f:64:24:6a:c9:2b:93:67:f1:7c:cc:
                    7c:2c:50:bb:f3:f0:05:40:a2:7e:e0:d4:af:e6:49:
                    80:ee:85:10:e9:3e:fb:ea:2a:5f:b7:f7:f5:7d:91:
                    10:2a:ac:ed:e5:e7:31:b7:1b:2e:a9:42:c3:56:4c:
                    af:98:4a:bf:1a:b5:26:7b:b7:69:e3:54:d2:98:c5:
                    c0:33:0e:a8:64:83:4f:8a:46:86:fc:09:0a:bd:83:
                    3c:bc:3c:ae:23:a8:80:30:33:1b:ae:c7:75:ff:64:
                    49:4b:f6:77:f1:b4:8a:9b:c1:35:17:b6:a1:5a:3e:
                    d9:0c:26:c9:53:6c:ea:88:ee:95:bb:ab:40:86:01:
                    07:a4:8e:02:71:f9:67:4d:0e:76:8e:4c:ba:09:4a:
                    f7:73:3f:f4:ff:d9:f3:42:8e:c9:8b:f0:c0:54:94:
                    bb:ab:8d:c0:64:a0:45:de:db:de:88:07:66:5a:0d:
                    8b:09:9d:1d:c8:a3:8e:e0:ad:42:01:39:c1:42:39:
                    d7:b8:2d:c7:73:75:4e:5d:5b:dc:c4:ff:85:89:be:
                    d8:2f:7e:bc:70:36:a8:e7:fd:4d:ec:8d:a5:59:ff:
                    6e:43:c7:b1:1f:03:b3:54:f0:f4:f4:25:be:d2:cb:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:48:09:70:3F:D5:6F:63:9C:80:C1:08:B4:0A:EF:D9:56:10:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f268b344-4080-3cd8-b557-3f361592d6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:65:5b:48:df:ac:66:52:e6:38:10:e6:c3:59:61:82:4d:0e:
         23:ca:6f:e4:33:f8:98:b8:75:66:6e:cf:1e:91:88:63:ee:14:
         6d:ea:ff:c6:89:4f:5c:bc:0b:bd:36:e9:b1:76:f6:8c:77:f0:
         db:94:2c:3d:f5:60:80:11:eb:24:9c:70:ca:e3:a5:64:61:8c:
         f1:3b:81:bf:91:34:4b:f2:9a:3b:ab:99:80:40:e2:29:02:5e:
         35:87:90:b0:b7:a6:86:4d:5f:d8:dd:63:7d:e0:49:ab:2a:01:
         78:9b:7b:03:fb:d0:24:6e:f1:d4:79:c2:d0:8b:94:01:49:01:
         56:e8:45:7a:05:cc:44:89:34:46:8a:60:e1:11:27:4a:38:b0:
         eb:8f:8a:45:29:2c:48:62:b5:ab:5e:9e:43:d7:af:02:92:6c:
         62:47:da:30:f0:90:ea:ff:26:71:da:16:22:9f:e8:d5:d7:9a:
         f7:bd:3b:0e:12:54:59:d5:cb:29:d8:91:81:a2:12:cf:08:81:
         dc:53:a3:9a:25:34:6d:74:d1:c9:84:30:2a:c9:df:46:8d:f5:
         53:39:d9:87:e7:77:a0:92:14:2b:80:e7:e7:ce:07:80:38:cd:
         d1:85:92:47:83:74:d4:f0:58:46:42:3c:7e:92:36:09:78:f6:
         2e:cb:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:28:49 2025 by rpki-client